[Hiring] Compliance Engineer @Wiz, Inc.

Role Description

Come join the organization that is redefining security for the AI era. As one of the fastest-growing startups ever, we enable teams to secure cloud and AI applications by connecting code, cloud, and runtime into a single shared context. Trusted by security teams all over the world, we have a proven track record of success and a culture that values world-class talent. Our Wizards from all over the globe work together to protect the infrastructure of our customers, including over 65% of the Fortune 100, who trust us to scan and secure over 230 billion files daily.

We are seeking an experienced Compliance Engineer to serve as the strategic technical lead for Wiz’s FedRAMP CR26 initiative. You will define the long-term technical roadmap by architecting comprehensive compliance-as-code solutions, utilizing both Wiz's native features and custom-developed automations outside the platform to efficiently address CR26 Class D rule changes. This individual contributor role bridges complex regulatory requirements with scalable engineering practices, ensuring our cloud services meet stringent federal and defense standards while maintaining high availability, security, and audit-readiness.

Qualifications

• 6+ years of experience in security engineering, DevOps, and systems engineering.
• 4+ years of expertise in NIST SP 800-53, FedRAMP High baselines, and DoW SRG overlays.
• Deep understanding of the differences between FR 20x and CR26 ruleset for Rev5 authorizations.
• Experience working in a cloud-native environment with DevSecOps technologies.
• Strong proficiency in scripting and Infrastructure as Code (IaC).
• Experience with cloud platforms in government spaces.

Requirements

• Experience with AWS GovCloud.
• Experience in Azure Government, Google Cloud for Government (Assured Workloads), or equivalent.
• Experience with DevSecOps technologies including Microservices, GitOps, and Observability / Logging / SIEM / Platforms.
• Experience with Packer, other Configuration as Code tools, and Policy as Code tools.
• Experience automating compliance validation using cloud-native tools.

Responsibilities

• Lead the technical roadmap for FedRAMP Continuous Monitoring.
• Architect compliance outcomes by translating NIST 800-53 Rev. 5 and FedRAMP CR26 rulesets into scalable engineering and product solutions.
• Engineer evidence generation frameworks to reduce manual effort for 3PAO assessments.
• Conduct technical risk assessments and root-cause analysis on compliance findings.
• Own the technical compliance documentation lifecycle, including Security Decision Records (SDRs).
• Collaborate cross-functionally with legal, product, engineering, devops, architecture, security, and federal customer teams.
• Mentor others on FedRAMP/DoW compliance best practices.

Compensation + Benefits

Compensation for this full-time position includes base salary + bonus + equity + benefits. The US base salary range for this full-time position is listed below:

• US Base Pay Range: $174,000 — $238,000 USD

Applicants must have the legal right to work in the country where the position is based, without the need for visa sponsorship. This role does not offer visa sponsorship.